Q3/2017

THIRD-GENERATION NETWORK SECURITYTHE FORTINET SECURITY FABRIC

1ST GENERATION

Secure The Connection

2ND GENERATION

Secure The Content

3RD GENERATION

Secure The Infrastructure

$2M

~$1.275B

2002 2016

REVENUE

CAGR 57%

Founded: Nov. 2000

First Product Release: May 2002

Fortinet IPO: Nov. 2009

NASDAQ: FTNT

Headquarters: Sunnyvale, California

Employees: 4,800+

FY 2016 Revenue: $1.275B

Q2 2017 Revenue: $363.5M

Q2 2017 Billings: $426.9M

Q2 2017 EPS (non-GAAP): $0.27

Market Cap (July 26, 2017): $7.1B

$1.46B Cash and No Debt

Units Shipped to Date: 3.3M+

Customers: 320,000+

395 Patents Issued

316 Patents Pending

OVERVIEW

Operations2%

G&A7%

Service & Support20%

Sales & Marketing

46%

R&D25%

Americas44%

EMEA36%

APAC20%

High-End Appliances39%Large enterprises & telcos/ service providers

Entry-Level Appliances32%

SMBs, branch offices, and retail

Mid-Range Appliances29%

Enterprises

Americas63%

EMEA24%

APAC13%

EMPLOYEESby Function

EMPLOYEECOST

by Region

REVENUEby Region

FortiGate Billings

by Segment

Fortinet’s mission is to deliver the most innovative, highest-performing network security fabric to secure and simplify your IT infrastructure. We are a leading global provider of network security appliances for carriers, data centers, enterprises and distributed offices.

Q2 2017

3-5XOther comparable Network Security CompaniesSource: Published USPTO data

2

GAINING SHARE IN A GROWING MARKET

Fortinet is a major player in many segments of the fast-growing Network Security and WLAN markets.

Fortinet is the largest network security appliance vendor (units) and growing quickly, according to IDC...

25

20

15

10

5

0

2016 2019

$33.6B

$27.3B

Network Security & WLAN MarketSource: IDC Worldwide Endpoint Security Forecast, 2016–2020IDC Worldwide Security and Vulnerability Management Forecast, 2016–2020IDC Worldwide Enterprise WLAN Forecast, 2016–2020IDC Worldwide Specialized Threat Analysis and Protection Forecast, 2016–2020IDC Worldwide Web Security Forecast, 2016–2020IDC Worldwide IT Security Products Forecast, 2015–2019

30

35

Messaging

EnterpriseEndpoint

Web Security

EnterpriseWLAN

NetworkSecurity

ATP

SIEM

Source: IDC Worldwide Security Appliances Tracker, April 2017 (based on annual unit shipments)

2011 2012 2013 2014 2015 2016

500,000

600,000

700,000

400,000

300,000

200,000

100,000

Check Point

Palo Alto Networks Juniper Networks

Cisco

2000

2002

2003

2004

2005

2006

2009

2010

2012

2013

2014

2015

2016

2017

Fortinet Founded

Began Global Sales

FortiGate & FortiOS 1.0

1st Security Processor:Content Processor

FortiManager

FortiOS 2.0

FortiOS 3.0

1st Security Processor:Network Processor

FortiWiFi

FortiAP

FortiOS 5.0 & SoC2

1M Units Shipped

New HQ

1 Tbps Firewall

1st 100 GbE Port Security Appliance

1st 40 GbE Port Security Appliance

Security Processor NP6

FortiSandbox

Internal Segmentation Firewall

2M Units Shipped

Acquired Meru Networks

FG-5000 (ATCA)

FortiOS 4.0

IPO

1st Security Processor:System-on-a-Chip

FortiGate 7000 Series

FortiCASB

3M Units Shipped

Fortinet Security Fabric

CP9 & SoC3

Acquired AccelOps

Detection Prevention & Remediation Integration Performance & Value

100s of Companies < 50 < 5

Fortinet Is the Only Company to Excel at All Key Stages of Network Security

3

EMERGING SECURITY CHALLENGES

Today’s Network Is BorderlessIoT and the cloud have

expanded the attack surface−

the “edge” is no longer clearly

defined. There are more ways

in and more ways out.

Slow Is BrokenSecurity has become a

bottleneck; enterprises

compromise security features

to achieve performance goals.

Complexity Is the Enemy of SecurityToo many point solutions

create security gaps and a

slow response to threats; no

communication or coordination.

Perf

orm

ance

Degra

dat

ion

1980s Today

Generation 3INFRASTRUCTURE

Generation 2CONTENT

Generation 1CONNECTION

Machine toMachine Attacks

AdvancedTargeted Attacks

MaliciousApps

MaliciousSites

SpamBotnets

Viruses& Spyware

Intrusion& Worms

Fabric

Advanced ThreatProtection

Anti-spam

Lock & Key

Firewall/VPN

IPS

Antivirus

Web Filter

Application Control

Layer 5-7:Content & Application

Layer 3-4:Connection

Layer 1-2:PhysicalHardware Theft

APP

URL

Security Fabric

NGFW/UTM

Stateful Firewall

First-generation network security, known as stateful firewalls, focused on securing the connection. Led by Fortinet, a second

generation of network security, next-generation firewalls and UTMs, expanded inspection to the application and content.

4

THE FORTINET SECURITY FABRIC

THIRD-GENERATION NETWORK SECURITY

BROADThe Fabric covers the entire attack surface—security can be applied to the network, endpoints, access, applications, and cloud, and visibility extended to other vendor solutions.

POWERFULThe Security Fabric utilizes security processors to reduce the burden on infrastructure, allowing comprehensive security without affecting performance.

AUTOMATEDThe Security Fabric enables a fast and coordinated response to threats—all elements can rapidly exchange threat intelligence and coordinate actions.

NOC/SOC

Cloud

Partner API

Access

Client/IoT

ThreatIntelligence

Application

Network

FortiGate VMAWS and AzureFortiCASB

FortiMailFortiWeb

FortiManagerFortiAnalyzerFortiSIEM

FortiAPFortiSwitch

FortiSandboxFortiGuard

FortiClient

FortiGate

5

FORTINET’S SECURITY FABRIC COVERS YOUR ENTIRE NETWORK

Fortinet Solutions

Cloud-IaaS

Cloud-SaaSFortiCloud

FortiCloudSandboxing

FortiCloudAP Management

FortiCASB

PUBLIC CLOUD

FortinetVirtual Firewall

FortiMailEmail Security

FortiGate Internal Segmentation FW FortiAnalyzer

SECURITYOPERATIONS

CENTER

FortiManager

FortiSIEM

FortiDDoS Protection

FortiSandbox

EmailServer

FortiGate Internal Segmentation FW

FortiGateDCFW/NGFW

FortiExtender LTE Extension

FortiGate/FortiWiFiDistributed Ent FW

FortiWebWeb Application

FW

BRANCHOFFICE

FortiClient

FortiClient

CAMPUS

Secure Access Point

FortiGate Internal Segmentation FW

FortiSandbox

FortiGate NGFW

FortiSwitch Switching

FortiGate Internal Segmentation FW

IP Video Security

FortiClient

FortiSwitch Switching

Top-of-Rack

Web Servers

FortiADCApplication Delivery Controller

FortiGate VMXSDN, Virtual FW

FortiADC Application Delivery Controller

DATA CENTER/PRIVATE CLOUD

APPLICATION SECURITY

ADVANCED THREATPROTECTION

CLOUD SECURITY

ENTERPRISE FIREWALL

FortiWebFortiADCFortiDDoSFortiWANFortiCacheFortiGuard Services

FortiSandboxFortiMailFortiWebFortiClientFortiCloud SandboxingFortiGuard Services

FortiGate VM (Virtual FW)FortiGate VMX (SDN Virtual FW)FortiGate VM for Public Cloud - AWS- Microsoft Azure- Googe Cloud- OpenStack-basedFortiHypervisorFortiCASBFortiGuard Services

FortiGate- Next-Generation FW- Data Center FW- Internal Segmentation FW- Secure SD-WANFortiManagerFortiAnalyzerFortiGuard Services

Hardware Appliance Virtual Machine Cloud

6

FORTINET’S SECURITY FABRIC COVERS YOUR ENTIRE NETWORK

Fortinet Solutions

Step Level Objective

NSE 1 Develop a foundational understanding of network security concepts.

NSE 2Develop the knowledge and skills necessary to sell key Fortinet solutions. (For Fortinet employees and partners only)

NSE 3Sales Associate

Develop the knowledge and skills to sell Fortinet products. (For Fortinet employees and partners only)

NSE 4Professional

Develop the technical knowledge and skills needed to configure and maintain a FortiGate Next-Generation Firewall solution.

NSE 5Analyst

Develop a detailed technical understanding of how to implement network security management and analytics.

NSE 6Specialist

Develop an understanding of advanced security technologies beyond the firewall.

NSE 7Troubleshooter

Demonstrate a deep technical understanding of key Fortinet solutions.

NSE 8Expert

Demonstrate the ability to design, configure, install, and troubleshoot a comprehensive network security solution in a live environment.

FortiCare

Our FortiCare customer support team provides global technical

support for all Fortinet products. With support staff in the Americas,

Europe, Middle East, and Asia, FortiCare offers services to meet the

needs of enterprises of all sizes.

PremiumServices

ProfessionalServices

8x5

24x7

Become a Fortinet Network Security Expert!

Fortinet’s Network Security Expert (NSE) Program is an 8-level

training and assessment program designed for customers, partners,

and employees, with over 74,000 security certifications to date.

Validate YourSecurity Experience

DemonstrateValue

AccelerateSales

12345678

SecurityAuditServices

360º

Cloud-IaaS

Cloud-SaaSFortiCloud

FortiCloudSandboxing

FortiCloudAP Management

FortiCASB

PUBLIC CLOUD

FortinetVirtual Firewall

FortiMailEmail Security

FortiGate Internal Segmentation FW FortiAnalyzer

SECURITYOPERATIONS

CENTER

FortiManager

FortiSIEM

FortiDDoS Protection

FortiSandbox

EmailServer

FortiGate Internal Segmentation FW

FortiGateDCFW/NGFW

FortiExtender LTE Extension

FortiGate/FortiWiFiDistributed Ent FW

FortiWebWeb Application

FW

BRANCHOFFICE

FortiClient

FortiClient

CAMPUS

Secure Access Point

FortiGate Internal Segmentation FW

FortiSandbox

FortiGate NGFW

FortiSwitch Switching

FortiGate Internal Segmentation FW

IP Video Security

FortiClient

FortiSwitch Switching

Top-of-Rack

Web Servers

FortiADCApplication Delivery Controller

FortiGate VMXSDN, Virtual FW

FortiADC Application Delivery Controller

DATA CENTER/PRIVATE CLOUD

SECURE ACCESS

FortiAPFortiGate AP ManagementFortiCloud AP ManagementFortiWLC/WLM AP ManagementFortiSwitchFortiAuthenticatorFortiTokenFortiExtenderFortiGuard Services

SECURITY OPERATIONS

FortiSIEMFortiManagerFortiAnalyzerFortiGuard Services- Indicators of Compromise

7

FortiGate 1500D

Fortinet’s core firewall platform, FortiGate, is powered by our purpose-built operating system, security processors, and threat intelligence from FortiGuard Labs.

HIGH-END APPLIANCES

FortiGate 5144C

155

Gb

ps

- 1.

12 T

bp

s80

- 3

20 G

bp

s52

- 8

0 G

bp

s

HIGH-PERFORMANCE NETWORK SECURITY

Hypervisor

Deployment Service Provider or Enterprise

Form Factor 2U/3U Appliance and Chassis

Interfaces 10, 40, and 100 GbE

FW Throughput 10 Gbps to more than 1 Tbps

Special Features Carrier Class

Deployment Service Provider or Enterprise

Form Factor 1U/2U/3U Appliance

Interfaces 10, 40, and 100 GbE

FW Throughput 16 to 320 Gbps

Special Features VDOM Management, Ultra-low Latency

Deployment Edge or Border Firewall

Form Factor 1U/2U/3U Appliance

Interfaces 1, 10, and 40 GbE

FW Throughput 1 to 160 Gbps

Special Features Advanced Threat Protection

Deployment Distributed Enterprise or SMB

Form Factor Desktop

Interfaces High-density 1 GbE

Throughput 1 to 3.5 Gbps

Special Features Wi-Fi, PoE, Ruggedized

Deployment East/West Data Center

Form Factor Virtual Machine

SDN Integration Cisco ACI, VMware NSX, OpenStack

Throughput Hardware Dependent

Hypervisors All Major Hypervisors Supported

Licensing Perpetual, Subscription, Metered

Deployment AWS, Microsoft Azure, Google

Form Factor Cloud Virtual Machine

Throughput Cloud Dependent

Licensing BYOL or On-Demand

Data Center Firewall (DCFW)/Carrier Class Firewall (CCFW)

Internal Segmentation Firewall (ISFW)

Next-Generation Firewall (NGFW)

Unified Threat Management (UTM)

Private Cloud−Virtual Machine Firewall

Public Cloud−Cloud Firewall

FortiGate 3800D

100G

FortiGate 3700D

40G

FortiGate 3200D

FortiGate 2000E

FortiGate 7060E

NEW40G

100G

FortiGate 3980E

100GNEW

40GNEW

FortiGate 7040E

NEW

40G

100G

8

FortiGate 60E

FortiGate 30E

FortiGate 80E

FortiGate 100E

FortiGate 300D

FortiGate 600D

MID-RANGE APPLIANCES

ENTRY-LEVEL APPLIANCES

FortiGate 200E

7.4 - 36 Gb

ps

950 Mb

ps - 3.5 G

bp

s

HIGH-PERFORMANCE NETWORK SECURITY FortiGate 800D

FortiAP U421EV FortiAP U423EV

Platform (FortiGate)

¡¡ Hardware or VM¡¡ Deployment Mode¡¡ # and Type of Ports¡¡ Throughput

Base HW/VM List price

Support (FortiCare) & Services

¡¡ 8x5 or 24x7 + Prem. Replacement + Advanced Services¡¡ FortiCare 360°¡¡ Professional Services

15 or 25% Varies Varies

+ 10% Daily rate

Subscriptions (FortiGuard)

¡¡ Individual Threat Intelligence Feeds¡¡ UTM or Enterprise Bundles

+ 20% ea. or +40/65%

Term

¡¡ 1, 3, 5 year¡¡ Discount for multi-year term length

The Security Processor Advantage

VS.

MOREPERFORMANCE

LESSLATENCY

LESSSPACE

LESSPOWER

CPU & Serial Processing-based

Fortinet SPU-basedParallel Path Processing

Slow, Not Scalable& Poor TCO

FlexiblePolicy

AcceleratesNetworkTraffic

AcceleratesContent

Inspection

FW

IPsec VPN

SSL VPN

IPS

40 Gbps

25 Gbps

28 Gbps

20 Gbps

6X - 12X performance

FortinetSystem-on-a-Chip

Optimized for Entry-level

Form Factors

5X FW8X/11X SSL/IPsec VPN5X IPS5X Concurrent Sessions3X Power Efficiencyvs. similarly priced offerings

based on Intel E5 2640v2(8 core 2Ghz)

802.11ac Wave 2

FortiGate 50E

SIMPLE PRICING MODEL

Fortinet Security Processors radically increase the security performance, scalability, and

throughput of Fortinet solutions while greatly shrinking space and power requirements,

compared to CPU-based solutions.

The FortiOS AdvantageFortiOS is the foundation of the Fortinet Security Fabric, consolidating many technologies

into a simplified, single policy and management framework. FortiOS provides customers with

superior protection, deeper visibility and control, reduced complexity, and greater operational

efficiency across their entire attack surface.

1

2

3

4

Networking Security Integration Management

Firewall Intrusion Prevention Email NOC/SOC/Policy

VPN Application Control WAF Reporting & Compliance

Routing Anti-malware Endpoint Topology Views

Switching Anti-botnet Sandboxing Management

SD-WAN Web Filtering Vulnerability Analytics

Wi-Fi Controller Mobile Security Partner APIs VDOM/ADOM

More... More... More...

The FortiGuard Threat Intelligence AdvantageFortinet solutions are powered by the security services developed by FortiGuard Labs.

Working with world-class, in-house tools and data collected from sensors around the

globe, our 200+ researchers discover breaking threats and then update FortiGuard threat

intelligence services to protect over 320,000 customers every day.

Enterprise Bundle x x x x x x x

UTM Bundle x x x x x

Applic

ation

Contro

l*

IPS Antiv

irus/A

nti-b

otnet

Anti-

spam

Web Fi

lterin

g

Mobile

Secu

rity

Adv. T

hreat

Protec

tion/

Cloud S

andb

ox

Indus

trial S

ecuri

ty

Vulne

rabilit

y

* Application Control comes standard with every FortiCare support contract

Individual Subscription Services

9

Palo AltoNetworks

IBM

JuniperNetworks

FortinetIntel

Security

HPE

90%

80%

70%

60%

50%

40%

30%

20%

10%

0%$20 $10 $0$30$40$50$60$70$80$90$100$110$120$130$140

100%

*TrendMicro

TCO per Protected Mbps

Secu

rity

Eff

ectiv

enes

s

Average

Average

• Fortinet FortiGate 3000D v5.4.0, build 7184 • HPE TippingPoint S7500NX v3.7.2.4252 • IBM Security Network Protection XGS 7100 v5.3.2.1

PRODUCTS TESTED

On March 1, 2016, TippingPoint, owned by Hewlett Packard Enterprise (HPE), submitted the S7500NX v3.7.2.4252 to the NSS Labs DCIPS Public Group Test. During testing, NSS discovered a number of security issues, which caused the product to receive a Caution rating. After testing began, Trend Micro finalized the acquisition of TippingPoint from HPE (March 8, 2016). As the new owner of TippingPoint, Trend Micro was made aware of the test results. Trend Micro quickly took action, resolved the issues, and provided NSS with a late submission for testing. NSS confirmed TOS v3.8.3.4494 resolved the security is-sues found in the HPE version of the product, and also improved both Security Effectiveness and performance (see individual Test Report). The NSS Security Value Map™ (SVM) is a point-in-time measurement, and due to the timing of the acquisition, the HPE version of the product is represented in the SVM. How-ever, in light of these unusual circumstances, we have included this notation to inform our enterprise clients of the corrective actions taken by Trend Micro.

*

• Intel Security McAfee Network Security Platform NS9100 v8.2.5.120 • Juniper Networks SRX5400 v12.3X48-D18 • Palo Alto Networks PA-7050 v7.0.4

DATA CENTER INTRUSION PREVENTION SYSTEM (DCIPS) SECURITY VALUE MAP™

JUN

E 2

016

DC IPS FortiGate 3000D WAF FortiWeb 1000D

t

Symantec

100%

90%

80%

70%

60%

50%

40%$30 $25 $20 $15 $10 $5 $0

TCO per Protected CPS

Secu

rity

Effs

Aver

age

Average F5 RadwareCitrix

INDEPENDENTLY TESTED AND VALIDATED PROTECTION

NGFW FortiGate 3200D & 600D BDS FortiSandbox 3000D

10

CertificationsCertification Fortinet

Check Point Cisco Palo Alto

Juniper SRX FireEye

NSS Labs Next-Gen Firewall ¡ ¡ ¡ ¡ ¡ X

NSS Labs Data Center Firewall ¡ X X X X X

NSS Labs Breach Detection System ¡¡¡ ¡ ¡ ¡ X

NSS Labs WAF ¡ X X X X X

NSS Labs NG IPS X ¡ X X

NSS Labs DC IPS ¡ X X ¡ ¡ X

NSS Labs Advanced Endpoint ¡ X X X X X

BreakingPoint Resiliency Score ¡ X X X X

ICSA Firewall ¡ ¡ X ¡ ¡ X

ICSA IPS ¡ X X X X X

ICSA Antivirus ¡ X X X X X

ICSA WAF ¡ X X X X X

ICSA ATD (Sandbox) ¡ ¡ X ¡ X ¡ICSA ATD (Email) ¡ X X X X X

VB100 Virus ¡ ¡ X X X X

VBSpam ¡ X X X X X

AV-Comparatives ¡ X X X X X

Common Criteria ¡ ¡ ¡ ¡ ¡ ¡

FIPS ¡ ¡ ¡ ¡ ¡ ¡

UNH USGv6/IPv6 ¡ ¡ ¡ ¡ ¡ X

UNPARALLELED THIRD-PARTY CERTIFICATION

¡¡ RECOMMENDED NEUTRAL ¡ CAUTION RETESTED & PASSED

The Only NSS Labs Recommended Edge to Endpoint ATP Solution

Fortinet has participated in the following Real-world group tests, open to the industry, and conducted by NSS Labs. In doing so, Fortinet stands out as the only vendor to provide an ATP Solution that is NSS Labs Recommended from the data center to the edge to the endpoint in the latest group tests.

¡¡ NGFW¡¡ DC IPS¡¡ Web Application Firewall¡¡ Endpoint Protection¡¡ Breach Detection (Sandbox)

11

Copyright © 2017 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Certain offerings mentioned herein may not be generally available, and Fortinet reserves the right to change, modify, transfer or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Revision: Q3 / 2017 v4 08.22.17

Ciudad de MéxicoRosas Moreno 33, Col. San Rafael,

México D.F. C.P. 06470Teléfonos: (52) 55 5140 3838

Oficina MonterreyAlfonso Reyes 3333, Col. Regina,

Monterrey N.L. C.P. 64290Tel. (52) (81) 8125 3900